include samhain
case $hostname {
- byrd,schuetz,tchaikovsky: {
+ byrd,schuetz,tchaikovsky,draghi,quantz,lamb,locke,rautavaara,rietz: {
include krb
}
- draghi,quantz: {
- include krb
- include afs
- }
- lamb,locke,rautavaara,rietz: {
- include krb
- include afs::server
- }
}
case $hostname {
+++ /dev/null
->debian.org
-82.195.75.101 #lamb.debian.org
-194.177.211.199 #rautavaara.debian.org
-206.12.19.120 #locke.debian.org
+++ /dev/null
-debian.org
+++ /dev/null
-AFS_CLIENT=true
-AFS_AFSDB=true
-AFS_CRYPT=true
-AFS_DYNROOT=true
-AFS_FAKESTAT=true
+++ /dev/null
-class afs {
- package {
- "openafs-client":
- ensure => installed,
- require => File['/etc/openafs/CellServDB',
- '/etc/openafs/ThisCell',
- '/etc/openafs/afs.conf.client'],
- ;
- "openafs-krb5":
- ensure => installed,
- ;
- }
- file {
- "/etc/openafs":
- ensure => directory,
- mode => 755,
- ;
- "/etc/openafs/CellServDB":
- source => "puppet:///modules/afs/CellServDB",
- # notify => # something to call fs newcell maybe?
- mode => 444
- ;
- "/etc/openafs/ThisCell":
- source => "puppet:///modules/afs/ThisCell",
- mode => 444
- ;
- "/etc/openafs/afs.conf.client":
- source => "puppet:///modules/afs/afs.conf.client",
- mode => 444
- ;
- }
-
- @ferm::rule { "dsa-afs callback":
- domain => "(ip ip6)",
- description => "afs callback",
- rule => "&SERVICE(udp, afs3-callback)"
- }
-}
-# vim:set et:
-# vim:set sts=4 ts=4:
-# vim:set shiftwidth=4:
+++ /dev/null
-class afs::server inherits afs {
- @ferm::rule { "dsa-afs fileserver":
- domain => "(ip ip6)",
- description => "afs callback",
- rule => "&SERVICE(udp, afs3-fileserver)"
- }
- @ferm::rule { "dsa-afs prserver":
- domain => "(ip ip6)",
- description => "afs callback",
- rule => "&SERVICE(udp, afs3-prserver)"
- }
- @ferm::rule { "dsa-afs vlserver":
- domain => "(ip ip6)",
- description => "afs callback",
- rule => "&SERVICE(udp, afs3-vlserver)"
- }
- @ferm::rule { "dsa-afs kaserver":
- domain => "(ip ip6)",
- description => "afs callback",
- rule => "&SERVICE(udp, afs3-kaserver)"
- }
- @ferm::rule { "dsa-afs volser":
- domain => "(ip ip6)",
- description => "afs callback",
- rule => "&SERVICE(udp, afs3-volser)"
- }
- #@ferm::rule { "dsa-afs bos":
- # domain => "(ip ip6)",
- # description => "afs callback",
- # rule => "&SERVICE(udp, afs3-bos)"
- #}
-}
-# vim:set et:
-# vim:set sts=4 ts=4:
-# vim:set shiftwidth=4:
#when /(draghi|orff|ravel|klecker|geo[123]).debian.org/: ignore << %w{libdns69 libdns66 libdns64 bind9 libbind9-60 liblwres60 bind9-host libisccfg62 libisccfg60 libisc62 libisc60 dnsutils bind9utils libisccc60}
#end
-ignore << '/openafs-modules-.*/'
ignore.flatten.join("\n")
%>